Set up Advanced Server Access

Create an Advanced Server Access team

  1. Go to
  2. Enter a team name.
  3. Copy the Base URL and Audience Restriction fields. You'll need these values to in a later step.

    Note: Leave this page open while completing the following steps.

Add Advanced Server Access to your Okta org

  1. From the Okta Admin Console, go to ApplicationsApplications.
  2. Click Browse App Catalog.
  3. Search for Okta Advanced Server Access and select it from the list.
  4. Click Add.
  5. Optional. Configure the general settings.
  6. Click Done.

Assign yourself to Advanced Server Access

  1. From the Applications page, click Okta Advanced Server Access to open the application settings window.
  2. Go to the Assignments tab and click AssignAssign to People.
  3. Identify your account in the list and click Assign.
  4. Click Save and Go Back, then click Done.

Connect your Okta org to Advanced Server Access

  1. In the application settings window, go to the Sign On tab.
  2. Under Settings, click Edit.
  3. In the Advanced Sign-on Settings section, enter the Base URL and Audience Restriction values you copied earlier.
  4. Click Save.
  5. Under SAML Signing Certificates, identify a certificate.
    Note: You may need to generate a new certificate.
  6. Click ActionsView IdP metadata.
  7. Note the URL of the window that opens.

Add the IdP metadata to Advanced Server Access

  1. Return to the Advanced Server Access team creation window.
  2. Under IdP Metadata URL, enter the URL you noted.
  3. Click Authenticate with Okta.

The Advanced Server Access dashboard appears after you successfully install Advanced Server Access and create a team.

Next you can configure SCIM to allow Okta to manage your Advanced Server Access groups and users.

Next steps